Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-EshuKxDSP8iYlJJBpWY5HPdZXM.cer
File: 1-EshuKxDSP8iYlJJBpWY5HPdZXM.cer (raw, json)
Hash identifier: AIT127UFxjsoboHwh4+joo1XutB6bf2jC/VN+vJ7nY4=
Subject key identifier: F8:4B:21:B8:AC:43:48:FF:22:62:52:49:06:95:98:E4:73:DD:65:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8450A3CBE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/0c9549-cb4d-45c1-9279-5df65963f1c7/1/1-EshuKxDSP8iYlJJBpWY5HPdZXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/0c9549-cb4d-45c1-9279-5df65963f1c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:44:39 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 194.180.208.0/23
IP: 194.180.224.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568288594918 (0x8450a3cbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:44:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f84b21b8ac4348ff22625249069598e473dd6573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:b3:ca:6a:88:d8:62:f2:90:41:6e:19:9b:
0f:9e:9c:9c:bc:64:10:c3:d3:d0:86:9e:a8:c2:ea:
06:3b:35:59:f2:4f:38:6e:30:c7:ec:fc:6f:57:e1:
6c:05:54:76:31:58:93:03:40:0c:90:ce:69:6b:69:
4a:82:89:f9:fe:4a:c8:2e:97:06:35:c0:26:a0:05:
ad:56:5d:53:62:b3:a6:d8:17:29:c6:e3:12:bb:11:
3b:b2:89:8a:3c:9f:8d:8b:77:b8:f3:64:e7:52:03:
33:98:6e:3f:6e:69:97:c4:c7:d4:98:e2:a8:60:a3:
be:05:5b:60:a2:3b:19:ed:b3:dd:fb:0e:c9:84:17:
bf:92:1c:2a:31:19:99:d1:01:47:06:6f:c5:ca:a7:
f1:cc:e2:80:7c:32:7b:11:56:1d:00:a7:b6:b7:17:
0e:69:71:3c:d5:63:9f:7e:b3:05:91:9d:f2:f2:85:
d5:bd:e0:46:5f:3b:37:40:9b:e5:37:52:cc:a3:57:
5b:77:ac:cd:d3:b7:9d:24:75:67:6d:d0:a3:a0:54:
63:4b:30:c9:b0:a1:8a:c0:1a:fc:f4:d0:43:31:bd:
2d:88:72:ed:a6:9b:89:a4:be:38:bc:44:b9:67:e7:
70:d0:05:97:e1:1c:76:a6:2f:2f:de:8f:9b:6c:69:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4B:21:B8:AC:43:48:FF:22:62:52:49:06:95:98:E4:73:DD:65:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0c9549-cb4d-45c1-9279-5df65963f1c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0c9549-cb4d-45c1-9279-5df65963f1c7/1/1-EshuKxDSP8iYlJJBpWY5HPdZXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.208.0/23
194.180.224.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:c4:3f:d3:72:b0:a1:e5:a8:11:3d:93:ec:00:20:b4:be:81:
c3:78:73:40:57:8e:ed:fc:19:25:27:3c:f9:0f:35:a3:07:8c:
b5:d6:c2:1b:1f:dc:5f:8e:26:d5:98:98:a7:fe:87:b3:b1:07:
9c:50:7d:01:88:d2:d9:c9:73:4f:83:3d:1b:94:b8:28:a5:ee:
3d:10:7a:b6:80:77:3d:68:27:13:31:4a:31:85:06:f0:06:98:
fa:b3:ec:dd:f5:a9:fe:4d:8b:d9:56:5f:52:ff:8a:81:60:21:
3c:ac:8c:a0:c7:b5:71:f0:79:fb:86:ed:2d:f0:4f:9d:19:dc:
0a:19:99:d8:80:46:13:08:2d:3a:97:02:e2:7f:2a:37:d7:00:
54:43:ff:1d:d7:e6:a6:7c:c2:25:da:1c:26:3c:42:eb:54:14:
89:51:87:db:ea:89:c7:5e:e1:22:a5:61:c2:8a:e0:ca:e8:6d:
35:69:2d:0b:ff:ac:9e:8c:0b:14:79:01:8b:7a:ea:48:ca:a1:
28:c1:5c:19:35:1e:4f:bc:8c:79:5d:4b:c6:f4:c8:d3:f4:54:
88:3b:c7:94:fe:cc:ac:f7:d2:c1:3e:71:4d:6d:af:1e:dc:c1:
45:35:86:8a:7b:e8:cb:77:70:6c:b8:e5:87:1e:f5:3d:ff:c8:
d5:a8:2f:25
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIGAIRQo8vmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDc0NDM5WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODRiMjFiOGFj
NDM0OGZmMjI2MjUyNDkwNjk1OThlNDczZGQ2NTczMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwkOzymqI2GLykEFuGZsPnpycvGQQw9PQhp6owuoGOzVZ
8k84bjDH7PxvV+FsBVR2MViTA0AMkM5pa2lKgon5/krILpcGNcAmoAWtVl1TYrOm
2BcpxuMSuxE7somKPJ+Ni3e482TnUgMzmG4/bmmXxMfUmOKoYKO+BVtgojsZ7bPd
+w7JhBe/khwqMRmZ0QFHBm/FyqfxzOKAfDJ7EVYdAKe2txcOaXE81WOffrMFkZ3y
8oXVveBGXzs3QJvlN1LMo1dbd6zN07edJHVnbdCjoFRjSzDJsKGKwBr89NBDMb0t
iHLtppuJpL44vES5Z+dw0AWX4Rx2pi8v3o+bbGm+1QIDAQABo4ICizCCAocwHQYD
VR0OBBYEFPhLIbisQ0j/ImJSSQaVmORz3WVzMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzBjOTU0OS1jYjRkLTQ1YzEt
OTI3OS01ZGY2NTk2M2YxYzcvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMGM5NTQ5LWNiNGQtNDVjMS05
Mjc5LTVkZjY1OTYzZjFjNy8xLzEtRXNodUt4RFNQOGlZbEpKQnBXWTVIUGRaWE0u
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAcK00AMEAcK04DANBgkqhkiG9w0BAQsFAAOCAQEAe8Q/03KwoeWo
ET2T7AAgtL6Bw3hzQFeO7fwZJSc8+Q81oweMtdbCGx/cX44m1ZiYp/6Hs7EHnFB9
AYjS2clzT4M9G5S4KKXuPRB6toB3PWgnEzFKMYUG8AaY+rPs3fWp/k2L2VZfUv+K
gWAhPKyMoMe1cfB5+4btLfBPnRncChmZ2IBGEwgtOpcC4n8qN9cAVEP/HdfmpnzC
JdocJjxC61QUiVGH2+qJx17hIqVhworgyuhtNWktC/+snowLFHkBi3rqSMqhKMFc
GTUeT7yMeV1LxvTI0/RUiDvHlP7MrPfSwT5xTW2vHtzBRTWGinvoy3dwbLjlhx71
Pf/I1agvJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org